What iPadOS 17.7.9 Fixes
iPadOS 17.7.9, released July 29, 2025, fixes 19 vulnerabilities in 14 parts of the system, according to Apple's security advisory.
Apple does not say that any of them were exploited before the fix. That makes iPadOS 17.7.9 a routine security update: worth installing soon, not an emergency.
It has since been superseded: the newest security release for iPadOS 17 is iPadOS 17.7.11, from May 11, 2026, which includes these fixes.
| What an attacker could do | Fixes |
|---|---|
| Elevated privileges or sandbox escape | 1 |
| Private data or protections bypassed | 4 |
| Crash or denial of service | 10 |
| Other | 4 |
Grouped by us from the impact Apple gives for each fix; the impact lines below are Apple's own.
Which Devices Get iPadOS 17.7.9
Apple lists iPadOS 17.7.9 for: iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, and iPad 6th generation.
How to Install iPadOS 17.7.9
On the iPad, open Settings → General → Software Update.
Security fixes are cumulative: any later release for the same version includes these as well, so if you are already past iPadOS 17.7.9 there is nothing to do.
Every Fix in iPadOS 17.7.9
All 19 CVEs in Apple's advisory, the most serious kinds first. Each entry is the part of the system affected, Apple's description of the impact and the fix, and the CVE ID.
-
CFNetwork
A non-privileged user may be able to modify restricted network settings
A denial-of-service issue was addressed with improved input validation.
CVE-2025-43223 -
Accessibility
Privacy Indicators for microphone or camera access may not be correctly displayed
The issue was addressed by adding additional logic.
CVE-2025-43217 -
copyfile
An app may be able to access protected user data
This issue was addressed with improved validation of symlinks.
CVE-2025-43220 -
CoreMedia Playback
An app may be able to access user-sensitive data
The issue was addressed with additional permissions checks.
CVE-2025-43230 -
Notes
An app may be able to access sensitive user data
A logging issue was addressed with improved data redaction.
CVE-2025-43225 -
CFNetwork
An attacker may be able to cause unexpected app termination
A use-after-free issue was addressed by removing the vulnerable code.
CVE-2025-43222 -
CoreMedia
Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory
An out-of-bounds access issue was addressed with improved bounds checking.
CVE-2025-43210 -
ICU
Processing maliciously crafted web content may lead to an unexpected Safari crash
An out-of-bounds access issue was addressed with improved bounds checking.
CVE-2025-43209 -
Kernel
A remote attacker may be able to cause unexpected system termination
The issue was addressed with improved checks.
CVE-2025-24224 -
Kernel
An app may be able to cause unexpected system termination
A double free issue was addressed with improved memory management.
CVE-2025-43282 -
libxslt
Processing maliciously crafted web content may lead to memory corruption
This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org .
CVE-2025-7424 -
WebKit
Processing maliciously crafted web content may lead to memory corruption
The issue was addressed with improved memory handling.
CVE-2025-31278 -
WebKit
Processing web content may lead to a denial-of-service
The issue was addressed with improved memory handling.
CVE-2025-43211 -
WebKit
Processing maliciously crafted web content may lead to an unexpected Safari crash
A use-after-free issue was addressed with improved memory management.
CVE-2025-43216 -
WebKit
Processing maliciously crafted web content may lead to an unexpected Safari crash
This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org .
CVE-2025-6558 -
Find My
An app may be able to fingerprint the user
A permissions issue was addressed with additional restrictions.
CVE-2025-31279 -
ImageIO
Processing a maliciously crafted image may result in disclosure of process memory
An out-of-bounds read was addressed with improved input validation.
CVE-2025-43226 -
Mail Drafts
Remote content may be loaded even when the 'Load Remote Images' setting is turned off
This issue was addressed through improved state management.
CVE-2025-31276 -
Sandbox Profiles
An app may be able to read a persistent device identifier
A permissions issue was addressed with additional restrictions.
CVE-2025-24220
iPadOS 17 Security Release History
iPadOS 17.7.9 in context: the security releases Apple has published for iPadOS 17, newest first, with the number of fixes each carried.
| Release | Released | Fixes |
|---|---|---|
| iPadOS 17.7.11 | May 11, 2026 | 1 |
| iPadOS 17.7.10 | August 20, 2025 | 1 Exploited |
| iPadOS 17.7.9 | July 29, 2025 | 19 |
| iPadOS 17.7.7 | May 12, 2025 | 30 |
| iPadOS 17.7.6 | March 31, 2025 | 50 Exploited |
| iPadOS 17.7.5 | February 10, 2025 | 2 Exploited |
| iPadOS 17.7.4 | January 27, 2025 | 19 |
| iPadOS 17.7.3 | December 11, 2024 | 17 |
The Same Fixes Elsewhere
Apple ships most fixes to every platform that shares the code, and to older versions still under support. These releases close at least one of the same CVEs:
Frequently Asked Questions
What does iPadOS 17.7.9 fix?
19 security vulnerabilities in 14 parts of the system, from Apple's advisory of July 29, 2025.
Was anything fixed in iPadOS 17.7.9 exploited?
Apple does not say so for any of the 19 fixes.
Which devices can install iPadOS 17.7.9?
iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, and iPad 6th generation.
Is iPadOS 17.7.9 the latest security update?
No. iPadOS 17.7.11, from May 11, 2026, is newer and includes these fixes.
Source: About the security content of iPadOS 17.7.9, Apple. Rechecked automatically while Apple is still adding entries.